79 matches found
actual-php2shell
actual-php2shell A reproducible, application-independent remote code execution PoC against PHP 8.5.11 the October 2026 advisories. It turns the two 2026 PHP memory-corruption advisories into system"cat /etc/passwd" with no application code — the victim's index.php just echoes ok. CVE-2026-109618 ...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell — Lab, Scanner & Exploit PoC CVE-2026-109618 ·...
TencentOS Server 4: php (TSSA-2026:1204)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1204 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
TencentOS Server 3: php:8.2 (TSSA-2026:1209)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1209 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146119)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146119 advisory. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-lab Weaponized PoC and lab for CVE-2026-109618...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
🛡️ PHP2Shell Vulnerability Scanner & Hardening Toolkit Aud...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146096)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146096 advisory. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: php (UTSA-2026-146098)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146098 advisory. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-probe A focused, open-source scanning probe for C...
php-oom-longjmp
php2shell - php-oom-longjmp Someone on the internet can talk to your PHP site the same way a browser does, with no password. On last-affected PHP they can send a crafted file-upload request that makes the engine run out of memory while it is still reading the request, before your application...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
CVE-2026-109618 — PHP OOM longjmp memory-safety PoC "php2sh...
php2shell-detect
php2shell Detection Zeek detections and Suricata rules for HTTP indicators associated with "php2shell" CVE-2026-109618 / CVE-2026-109619, potential RCE in PHP longjmp memory handling. Findings identify suspicious traffic or potentially affected software. Corelight blog: PHP2Shell detection before...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php-oom-longjmp Someone on the internet can talk to your PHP...
PHP OOM / longjmp() State Corruption Simulation
PHP contains an out-of-memory handling issue where longjmp may leave request memory partially initialized before cleanup reads or branches on it, potentially resulting in remote code execution. This educational visualization demonstrates the conceptual execution flow...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: php (UTSA-2026-143724)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143724 advisory. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell Exploit Tools and Fingerprint Database CVE-2026-109...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell Vulnerability Reproduction Report CVE-2026-1096...
CLEANSTART-2026-LE11033 PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request
Security vulnerability affects the php package. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request...
Security Advisory 0200
Security Advisory 0200 . CSAF PDF Date: October 23, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 23, 2026 | Initial release 1.1 | October 26, 2026 | Added CloudVision Portal to platforms not affected and added CSAF file to advisory. Description Arista Networks is providing this securi...